abc59f8048a8c2bd83c2984d1b91dbf3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abc59f8048a8c2bd83c2984d1b91dbf3
Size

39KB
MD5

abc59f8048a8c2bd83c2984d1b91dbf3
SHA1

16c5bae512c7691094ed9b501dee87fe4cf63a1d
SHA256

27b8e95f7fb91286f06aae812f197224821326956ad4be5cdcff5154cc40956d
SHA512

73652cf60672eb440a929babd3e5a7169b77550ed15a4fb7d8b953a6bf827a0f748cc9f78544142c043011b34caa83ba41a3f2cfb3d356980edda8377134bb7a
SSDEEP

768:PNjGD624yrPS1ZKJHkGkqM8PZZ+2VrH1tgasAGzYc3:PNaD62fTAsNkGkqMYZQ2hH1tPPG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abc59f8048a8c2bd83c2984d1b91dbf3

Files

abc59f8048a8c2bd83c2984d1b91dbf3
.exe windows:4 windows x86 arch:x86

2f31d060f1b27e234fe842bda4a0445a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
CloseHandle
ExitProcess
LoadLibraryA
GetModuleFileNameA
GetCommandLineA
HeapAlloc
GetProcessHeap
HeapFree
GetStartupInfoA

user32

wsprintfA

Sections

.text
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE